Changes since v0.9.0

Security

• Rebuild release image to drop the distrusted eMudhra roots from the CA bundle. (#1920)
• Bump Go to v1.26.10. (@slashpai, #1923)

Improvements

• Bump Kubernetes dependencies to v0.36.5. (@slashpai, #1923)
• Bump github.com/onsi/ginkgo/v2 from 2.32.0 to 2.33.1. (@slashpai, #1923)
• Bump github.com/onsi/gomega from 1.42.1 to 1.44.0. (@slashpai, #1923)
• Bump github.com/prometheus/prometheus from 0.313.0 to 0.314.0. (@slashpai, #1923)
• Bump github.com/prometheus/common from 0.69.0 to 0.70.1. (@slashpai, #1923)

Others

• Bump golangci-lint to v2.15.0. (@slashpai, #1923)
• Update versions in README and kustomization.yaml for v0.9.1. (@slashpai, #1922)

Metrics Server is a scalable, efficient source of container resource metrics for Kubernetes built-in autoscaling pipelines.

Changes since v0.8.0

Improvements

• Bump Kubernetes dependencies to v1.36.2. (@slashpai, @dgrisonnet, PR #1687, #1712, #1758, #1803)
• Honor stderrthreshold when logtostderr is enabled. (@pierluigilenoci, PR #1782)
• Downgrade log level for scrape failures of not ready nodes. (@bhope, PR #1783)
• Add a diagram showing how metrics-server handles kubectl top pod requests. (@CatherineF-dev, PR #1654)

Bug fixes

• Require both node and pod metrics for storage readiness. (@slashpai, PR #1818)

Security

• Bump Go version to v1.26.4, addressing CVE-2025-47907 and CVE-2025-47906. (@dependabot, @RainbowMango, @dgrisonnet, @yangjunmyfm192085, PR #1681, #1738, #1758, #1784, #1803, #1830)
• Bump golang.org/x/crypto from 0.39.0 to 0.45.0. (@dependabot, PR #1737)

Others

• Bump golangci-lint to v2.11.4. (@slashpai, @dongjiang1989, @yangjunmyfm192085, PR #1686, #1713, #1740, #1784)
• Bump github.com/onsi/ginkgo/v2 from 2.23.4 to 2.32.0. (@dependabot, PR #1804, #1820, #1835)
• Bump github.com/onsi/gomega from 1.37.0 to 1.42.1. (@dependabot, PR #1693, #1820, #1835)
• Bump github.com/prometheus/prometheus from 0.304.2 to 0.313.0. (@dependabot, PR #1828, #1833)
• Bump github.com/prometheus/common from 0.65.0 to 0.69.0. (@dependabot, PR #1828, #1833)
• Bump github.com/spf13/pflag from 1.0.6 to 1.0.10. (@dependabot, PR #1690, #1820)
• Bump github.com/moby/spdystream from 0.5.0 to 0.5.1. (@dependabot, PR #1792)
• Bump google.golang.org/grpc from 1.72.0 to 1.81.1. (@dependabot, PR #1777, #1820)
• Bump mikefarah/yq from 4.45.4 to 4.47.1. (@dependabot, PR #1682, #1694)
• Bump actions/checkout from 4.2.2 to 7.0.0. (@dependabot, PR #1698, #1749, #1808, #1827)
• Bump actions/github-script from 7.0.1 to 9.0.0. (@dependabot, PR #1718, #1812)
• Bump actions/setup-python from 5.6.0 to 6.3.0. (@dependabot, PR #1728, #1742, #1832)
• Bump softprops/action-gh-release from 2.3.2 to 3.0.1. (@dependabot, PR #1731, #1746, #1819, #1826)
• Bump action-stars/install-tool-from-github-release. (@dependabot, PR #1743)
• Update versions in README and kustomization.yaml for v0.9.0. (@slashpai, PR #1822)
• Add slashpai and RainbowMango as reviewers. (@dgrisonnet, PR #1679)
• Use go tools. (@mrueg, PR #1648)

Changed

• Update the Metrics Server OCI image to 0.8.1. (#1770) @stevehipwell

Fixed

• Conditionally render insecureSkipTLSVerify field in APIService template to prevent GitOps sync drift when value is false. (#1727) @pawl
• Do not render annotations as null in APIService template to prevent permanent OutOfSync in ArgoCD. (#1752) @Serializator

Installation

kubectl apply -f https://github.com/kubernetes-sigs/metrics-server/releases/download/v0.8.1/components.yaml

Changes since v0.8.0

Improvements

• Bump Golang to v1.24.12 and Kubernetes dependencies to v0.33.7 (@dgrisonnet, #1758)

Added

• Add chart options to secure the connection between Metrics Server and the Kubernetes API Server. (#1288) @mkilchhofer
• Add unhealthyPodEvictionPolicy to the Metrics Server PDB as a user enabled feature. (#1574) @peterabarr

Changed

• Update the Addon Resizer OCI image to 1.8.23. (#1626) @stevehipwell
• Update the Metrics Server OCI image to 0.8.0. (#1683) @stevehipwell

Installation

kubectl apply -f https://github.com/kubernetes-sigs/metrics-server/releases/download/v0.8.0/components.yaml

Changes since v0.7.2

Improvements

• Wire server run options to flags #1560 #1656 (@benluddy, @slashpai)
• Bump Golang to v1.24.4 and to Kubernetes clients to v0.33.2 #1662, #1665 (@dgrisonnet,@yangjunmyfm192085,@slashpai)
  • This will help to include the disable-http2-serving flag added in SecureServingOptions (kubernetes/kubernetes#122176) for metrics-server
• Bump Prometheus module to v0.304.2 #1652, #1675 (@slashpai , @dependabot)

Tooling

• Add support for specifying other container engines #1649 (@slashpai)

Installation

kubectl apply -f https://github.com/kubernetes-sigs/metrics-server/releases/download/v0.7.2/components.yaml

Changes since v0.7.1

Improvements

• Update Golang to v1.22.5 and Kubernetes dependencies to v1.29.8